Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
File: dC44IKB42kewo3Ti06ZtYmPB4j8.mft (raw, json)
Hash identifier: SC50siC1N3AWKSSsTofw6Dj4hEc/pughZiz9wsM6tpM=
Subject key identifier: 1B:48:30:E6:05:5F:D3:DC:38:58:33:0D:A5:FB:EB:A0:B1:1E:AA:BA
Authority key identifier: 74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
Certificate issuer: /CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Certificate serial: 019A52D1F15788750323957E2F83C8B3393F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
Manifest number: 0FDF
Signing time: Wed 05 Nov 2025 07:01:21 +0000
Manifest this update: Wed 05 Nov 2025 07:01:21 +0000
Manifest next update: Thu 06 Nov 2025 07:01:21 +0000
Files and hashes: 1: dC44IKB42kewo3Ti06ZtYmPB4j8.crl (hash: ouFofoPQ1mCz3JnrSwyiPH5F+pCqiVYMll9AFAZu/WQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:f1:57:88:75:03:23:95:7e:2f:83:c8:b3:39:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=742e3820a078da47b0a374e2d3a66d6263c1e23f
Validity
Not Before: Nov 5 07:01:21 2025 GMT
Not After : Nov 6 07:01:21 2025 GMT
Subject: CN=1b4830e6055fd3dc3858330da5fbeba0b11eaaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4b:b4:93:4c:58:df:3d:65:06:b2:77:36:c0:
96:23:9f:97:3f:da:a3:2f:c2:6b:ae:a9:a3:76:47:
a5:5a:05:ac:b9:9b:a7:b7:42:e4:07:42:0c:93:6a:
68:33:65:26:ca:40:7c:48:5d:a3:cc:89:f9:79:75:
22:53:82:29:90:8b:00:ba:9b:8f:28:47:f8:d6:da:
37:fe:72:1f:0d:6d:46:a9:90:d4:83:55:e5:53:60:
4e:6a:13:d7:1f:fc:07:ae:bb:e8:0a:5c:1e:f7:62:
9a:de:44:94:c3:18:82:71:0e:16:60:a9:a4:a6:c7:
0a:3c:87:c3:57:f9:e4:2e:34:65:08:f4:fa:27:b4:
cc:30:71:64:1f:6e:19:12:99:e3:0e:43:0a:25:64:
00:e6:d8:f7:f1:be:20:c7:51:f9:25:e7:f7:be:5d:
7e:69:5e:82:a0:53:9b:7a:f5:a0:7c:7b:6a:c7:86:
70:53:f7:d0:12:7e:a1:b9:4f:48:8b:97:21:a8:54:
8b:c1:ce:bb:67:c0:93:d9:01:40:b6:8f:d5:6d:f2:
12:a3:52:9d:90:3b:7b:a5:74:21:cc:76:5a:f4:ce:
52:74:f7:9a:da:7f:1f:5a:4d:f9:7a:a3:66:c7:52:
aa:51:6f:26:f4:1b:98:34:4f:af:dd:26:d6:96:db:
b0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:30:E6:05:5F:D3:DC:38:58:33:0D:A5:FB:EB:A0:B1:1E:AA:BA
X509v3 Authority Key Identifier:
keyid:74:2E:38:20:A0:78:DA:47:B0:A3:74:E2:D3:A6:6D:62:63:C1:E2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC44IKB42kewo3Ti06ZtYmPB4j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/89fc51-d475-4eee-a970-930700ca617f/1/dC44IKB42kewo3Ti06ZtYmPB4j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b6:5e:07:d7:0a:38:47:a6:43:f6:2a:a6:e0:7c:1b:88:2a:
ae:a1:2a:fc:4e:fb:3b:55:63:4a:31:22:c5:6b:68:97:f9:46:
2a:b8:46:06:f6:53:e2:51:c9:42:79:bd:ec:50:f5:1b:f2:fe:
24:6d:f8:ff:3a:11:74:f9:f2:40:d0:8f:b6:9c:21:4a:f2:69:
0a:50:43:54:62:fa:8e:e2:6e:60:84:2e:04:23:49:cf:3e:ac:
19:9e:01:08:11:af:92:f5:4d:01:76:7f:20:8f:6e:c4:81:ba:
38:8f:0e:d6:2e:ae:e7:78:9d:15:b6:14:8a:8d:31:0f:78:65:
64:0e:84:da:df:c5:88:44:a0:f8:a3:fa:78:2b:e5:19:34:a8:
18:20:e6:6e:60:27:f9:62:3b:21:ff:e4:4b:27:e4:3f:70:85:
9f:74:ae:46:84:50:97:1e:ad:00:3a:73:c5:f5:c1:ea:c4:7a:
85:7f:8c:59:77:5f:32:14:90:fc:d2:92:19:9c:1e:b5:82:b1:
63:bf:e3:40:5a:33:1e:f7:b7:bb:21:b4:be:76:b7:b5:ea:80:
ef:5f:20:9c:31:ca:6f:15:3b:89:e9:79:74:1d:c1:c1:0a:ab:
db:37:4e:69:56:5b:cc:87:01:90:e4:1f:c2:9b:be:22:cb:b4:
92:6b:e2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:17:06 2025 by rpki-client